CapyGuardThe CapyGuard blog
Calm, practical guides to staying safe in crypto.
Oct 2026
Why no real site ever needs your recovery phrase
The single most expensive sentence in crypto. How phrase-stealing pages work, and how CapyGuard locks them down before you type a word.
Oct 2026
uniswaap.org and friends: how lookalike domains fool careful people
Keyboard slips, Cyrillic letters, fake endings and swapped numbers — the tricks behind copycat DeFi sites, and how we catch them.
Oct 2026
What a wallet drainer actually does when you click 'Approve'
Unlimited approvals, setApprovalForAll, Permit and blind signatures explained in plain language — and why CapyGuard pauses them.
Oct 2026
The airdrop that empties your wallet
Free tokens that cost you everything: how fake claim pages lure you in and what the 'Claim' button really signs.
Oct 2026
Address poisoning: the copy-paste trap in your transaction history
Scammers plant lookalike addresses in your history so you copy the wrong one. Why you should never paste from your own activity.
Oct 2026
Spring-clean your wallet: why old approvals are a ticking risk
Token approvals never expire. How to audit what every dapp can still spend, and revoke the ones you've forgotten.
Oct 2026
When the real site is the attack: DeFi frontend hijacks
DNS hijacks and compromised frontends mean the correct address bar can still serve a drainer. What protects you when the padlock lies.
Oct 2026
The other extensions in your browser can see your wallet
Every extension with 'read all data on all sites' can watch your wallet. A five-minute audit for the icons next to your address bar.
Oct 2026
Honeypot tokens: the chart that only goes up (until you buy)
Everyone can buy, nobody can sell. Inside the contract trick behind too-perfect charts, and how to test before you ape.